PT-2025-52756 · Linux+3 · Linux Kernel+3
Syzbot
·
Published
2025-12-23
·
Updated
2026-05-19
·
CVE-2025-68340
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the team device driver. Specifically, the issue arises when adding a port device that is already in an 'up' state. This can lead to modification of the team device header operations before the addition fails, potentially resulting in the private data of the device pointing to incorrect data structures. The sequence of commands involving 'ip link' can reproduce this issue. The resolution involves moving the team device type check change to the end of the team port add function to prevent irreversible type changes if subsequent checks fail, and preserving the original MTU assignment.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu